Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/7b2dac-0fb4-4309-8861-7231146d156f/1/DxoYFt02i3fPMr0hqeC61d9s3_A.mft
File: DxoYFt02i3fPMr0hqeC61d9s3_A.mft (raw, json)
Hash identifier: UwQhW8xaJRIkwQztquXVcPc8S+fop0w1l2pIBeDMzvQ=
Subject key identifier: 1D:66:BA:B8:28:FB:9D:42:91:8E:90:D5:C0:A6:B9:3F:2A:23:E0:D1
Authority key identifier: 0F:1A:18:16:DD:36:8B:77:CF:32:BD:21:A9:E0:BA:D5:DF:6C:DF:F0
Certificate issuer: /CN=0f1a1816dd368b77cf32bd21a9e0bad5df6cdff0
Certificate serial: 019D97AA7DCA53D9E9CE5C55521F1B301192
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DxoYFt02i3fPMr0hqeC61d9s3_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/7b2dac-0fb4-4309-8861-7231146d156f/1/DxoYFt02i3fPMr0hqeC61d9s3_A.mft
Manifest number: 18BE
Signing time: Thu 16 Apr 2026 19:00:25 +0000
Manifest this update: Thu 16 Apr 2026 19:00:25 +0000
Manifest next update: Fri 17 Apr 2026 19:00:25 +0000
Files and hashes: 1: DxoYFt02i3fPMr0hqeC61d9s3_A.crl (hash: AClEq0q6kuyTgK9u7s3hKNpgFXoPGYSnsOFspKf3hRA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/7b2dac-0fb4-4309-8861-7231146d156f/1/DxoYFt02i3fPMr0hqeC61d9s3_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/7b2dac-0fb4-4309-8861-7231146d156f/1/DxoYFt02i3fPMr0hqeC61d9s3_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/DxoYFt02i3fPMr0hqeC61d9s3_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 19:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:aa:7d:ca:53:d9:e9:ce:5c:55:52:1f:1b:30:11:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f1a1816dd368b77cf32bd21a9e0bad5df6cdff0
Validity
Not Before: Apr 16 19:00:25 2026 GMT
Not After : Apr 17 19:00:25 2026 GMT
Subject: CN=1d66bab828fb9d42918e90d5c0a6b93f2a23e0d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:27:ab:a8:46:1a:58:1b:ba:3e:a4:3d:67:b6:
47:39:88:5e:f7:14:f1:12:d9:42:b2:16:3a:f5:ae:
8a:f1:aa:94:00:aa:20:60:bc:06:b1:dc:05:b8:cc:
9d:2c:e9:1f:fa:a4:74:7b:08:1c:11:7c:cc:de:69:
36:14:db:89:95:21:1f:0f:2f:dd:f1:3f:7e:a5:ee:
57:8a:5d:f2:c8:62:38:48:d9:36:6b:7d:2d:0d:24:
9d:07:66:cf:fc:d7:cf:5a:b4:26:1c:6d:56:7b:ef:
a1:ce:f0:c6:8c:5a:41:bd:d0:04:d3:b5:02:dc:31:
c7:3b:8d:9b:dc:5c:23:66:a6:13:87:a2:90:47:cb:
12:dc:3b:6b:a4:be:98:b5:85:a9:0c:1e:d8:f9:12:
c4:29:5e:a9:ca:4a:15:cb:04:ad:a1:91:9c:1b:36:
9d:47:5b:54:e1:49:64:b4:05:2b:19:df:ad:df:b9:
58:ea:c4:c8:99:fe:74:a3:ee:4d:60:a1:f8:6c:32:
12:4e:55:90:00:1c:c1:65:96:93:be:67:29:02:ed:
4b:a1:d7:a2:d7:5c:1a:4b:da:46:ca:b7:ff:db:b9:
93:46:c3:47:32:0a:49:a9:80:6c:13:7a:1c:89:99:
4b:a0:52:51:ef:6e:47:42:a1:16:dd:69:61:56:5b:
0a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:66:BA:B8:28:FB:9D:42:91:8E:90:D5:C0:A6:B9:3F:2A:23:E0:D1
X509v3 Authority Key Identifier:
keyid:0F:1A:18:16:DD:36:8B:77:CF:32:BD:21:A9:E0:BA:D5:DF:6C:DF:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DxoYFt02i3fPMr0hqeC61d9s3_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/7b2dac-0fb4-4309-8861-7231146d156f/1/DxoYFt02i3fPMr0hqeC61d9s3_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/7b2dac-0fb4-4309-8861-7231146d156f/1/DxoYFt02i3fPMr0hqeC61d9s3_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:32:a6:4e:51:79:6d:ff:d7:fe:f0:c7:9a:22:f2:57:13:15:
c6:5e:fe:57:99:92:62:2a:38:8e:d7:d6:37:45:b1:da:69:50:
f4:ed:73:87:39:70:7b:bf:30:a9:67:de:91:ac:1c:91:11:15:
fa:2b:7b:18:67:41:9f:db:3a:0c:af:fa:ef:a0:6a:1e:23:72:
74:2e:80:39:95:28:26:8d:60:f8:85:c6:12:06:cc:ee:af:c3:
94:1e:f0:2a:93:0f:69:ab:7b:00:97:f2:ef:53:98:a5:27:83:
b5:31:de:bb:79:4a:2c:d2:38:85:fe:39:5a:c7:85:91:94:1b:
e9:f0:1e:6a:7f:28:ea:e7:60:82:d0:6c:62:dc:76:44:01:4d:
1c:46:03:be:bc:10:22:a2:35:da:c9:12:99:38:78:74:04:7b:
68:83:d6:96:d2:49:40:b3:0c:fb:21:de:18:60:7f:c5:6c:02:
1d:f8:6b:17:4f:cd:20:97:bc:7a:5a:81:e7:66:b8:9d:0d:2a:
4c:6e:b5:97:cf:cf:8e:d5:4d:d6:1c:dc:2d:49:1c:86:89:00:
b6:27:05:b0:2f:3e:e5:96:5b:a7:6c:e1:f8:9a:14:9c:ad:16:
50:89:11:20:58:36:32:be:b3:58:80:e8:7c:84:ec:7d:b3:24:
cd:03:5c:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:54:53 2026 by rpki-client